Information Security

In carrying out its mission to ensure that securities markets are fair, orderly, & efficiently maintained, the Securities & Exchange Comm. (SEC) relies extensively on computerized systems. Integrating effective information security controls into a layered control strategy is essential to ensure that SEC¿s financial & sensitive information is protected from inadvertent or deliberate misuse, disclosure, or destruction. This report assessed: (1) SEC¿s actions to correct previously reported information security weaknesses; & (2) the effectiveness of controls for ensuring the confidentiality, integrity, & availability of SEC¿s information systems & information. Includes recommendations. Charts & tables.